Privacy Policy

This privacy policy applies to the festen.app website. It explains which personal data we process when you visit this website, for what purposes, on what legal basis, and with whom it is shared. How your data is processed inside the Festen app itself (account, entries, receipt capture, subscription) is described separately in the app privacy policy.

Controller

The party responsible for data processing on this website is:

Wamb’s Consulting, owner Poclaire Wamba, trading as Festen App
Knesebeckstraße 63, 10719 Berlin, Germany
Email: kontakt@festen.app
Phone: 0176 47358408

We are not legally required to appoint a data protection officer and have not done so. For any data protection questions, reach us at kontakt@festen.app.

Legal bases at a glance

Where we obtain your consent, the legal basis is Art. 6(1)(a) GDPR. Where processing is necessary to perform a contract with you or to take pre-contractual steps, the basis is Art. 6(1)(b) GDPR. Where we are subject to a legal obligation, the basis is Art. 6(1)(c) GDPR. Where processing is necessary for our legitimate interests or those of a third party and your interests do not override them, the basis is Art. 6(1)(f) GDPR. Storing information on your device and accessing it are additionally governed by Section 25 TDDDG.

Hosting and delivery of the website

This website is hosted by Vercel. The provider is Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you visit the website, Vercel processes, on our behalf, the technical access data your browser transmits automatically so the page can be delivered. This includes in particular your IP address, the date and time of access, the address requested, the referring page, and details of your browser and operating system. This data is necessary to operate and secure the website. The legal basis is our legitimate interest in secure and reliable delivery under Art. 6(1)(f) GDPR. A data processing agreement under Art. 28 GDPR is in place with Vercel. Processing may also take place in the USA; for the safeguards covering transfers to third countries, see the section "Transfers to third countries".

Consent management (Cookiebot)

To obtain, manage, and document your consent to non-essential cookies and services, we use Cookiebot, a service of Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. Until you make a choice, non-essential services are blocked. Which technologies are used in detail, which cookies are set, and how you can change or withdraw your consent at any time are described in our cookie policy. The legal basis for the processing needed to document consent is Art. 6(1)(c) and (f) GDPR.

Web analytics (Google Analytics 4)

Subject to your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to evaluate how the website is used, such as which pages are visited and how visitors move through the site. This evaluation helps us improve the website. The IP address is shortened by Google Analytics 4 and not stored. Processing may also be carried out by Google LLC in the USA. The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with future effect via the cookie settings.

Online marketing and reach measurement

Subject to your consent, we use services that let us measure the effectiveness of our advertising and reach people who might be interested in Festen. These services only become active after your consent. The legal basis in each case is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Meta Pixel and Meta Conversions API
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Purpose: measuring actions on the website (such as page views and clicks on the download link) to evaluate the effectiveness of our advertising on Meta’s platforms and to build suitable audiences.
How it works: the Meta Pixel is code in the browser. The Conversions API additionally transmits events to Meta server-side. Both fire only after you consent to the Marketing category; without that consent, no data is transmitted to Meta.
Third country: processing by Meta Platforms, Inc. in the USA is possible.

Google Ads
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Purpose: measuring whether a visit to the website results from one of our ads (conversion measurement) and serving relevant ads.
How it works: after your consent, Google Ads sets cookies and similar technologies.
Third country: processing by Google LLC in the USA is possible.

Android waitlist (Resend)

When you sign up for the Android waitlist on our website, we process your email address to send you a confirmation email (double opt-in) and to notify you once, as soon as Festen is available on Android. To send and manage these emails we use the service Resend, provider Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. Resend processes your email address, your confirmation status, and clicks on links in these emails solely on our behalf. The legal basis is your consent under Art. 6(1)(a) GDPR; you can withdraw it at any time with future effect. A data processing agreement under Art. 28 GDPR is in place with Resend. Processing takes place in the USA; for the transfer we rely on the EU Standard Contractual Clauses and Resend's certification under the EU-U.S. Data Privacy Framework. If you do not sign up, no such processing takes place.

Fonts

We use the Inter typeface. The font is bundled when the website is built and served from our own server. No connection to Google’s servers takes place, and no personal data is transmitted to third parties for this purpose.

Contacting us

If you contact us by email at kontakt@festen.app or via a form on the website, we process the information you provide in order to answer your enquiry. The legal basis is our legitimate interest in answering your enquiry under Art. 6(1)(f) GDPR and, where the enquiry concerns the conclusion or performance of a contract, Art. 6(1)(b) GDPR. We delete this data once it is no longer needed to answer the enquiry and no statutory retention obligations apply.

Transfers to third countries

Some of the services we use may process personal data in the USA. The USA is not consistently regarded as offering a level of data protection equivalent to EU law. Where a transfer takes place, we base it on the European Commission’s standard contractual clauses under Art. 46(2)(c) GDPR and, where applicable, on the recipient’s certification under the EU-US Data Privacy Framework. Where the transfer is based on your consent, Art. 49(1)(a) GDPR is an additional basis; in that case you expressly consent to the risks associated with a transfer to the USA. We provide copies of the safeguards on request via kontakt@festen.app.

Retention period

We process personal data only for as long as necessary for the respective purposes. Technical access data used to deliver the website is deleted or anonymised after a short time. Data from cookies and similar technologies is stored for the periods stated in the cookie policy. Where statutory retention obligations apply, we restrict processing until the period expires.

Your rights

Under the GDPR you have the right to access the data we process about you (Art. 15), to rectification of inaccurate data (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), and a right to object (Art. 21). Where processing is based on your consent, you can withdraw it at any time with future effect; the lawfulness of processing carried out until then is unaffected. To exercise your rights, a message to kontakt@festen.app is enough.

Right to object

Where we process data on the basis of our legitimate interest under Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to that processing. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to assert, exercise, or defend legal claims.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about how we process your personal data. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59-61, 10555 Berlin, Germany. You may also contact the supervisory authority where you usually reside.

Changes to this privacy policy

We update this privacy policy when our data processing changes or legal requirements change. The version published on this page applies.

Cookie Declaration

The overview below shows which cookies and services are used on festen.app. You can change or withdraw your consent here at any time.